[FORTINET] Malicious Code Detected

alert any $HOME_NET any -> $HOME_NET any (msg:"[FORTINET] Malicious Code Detected"; content:"trigger=Default-Malicious-Code-Detection-By-"; meta_content:!"severity=
| 22
| %sagan%
| 22
| ",info,low; meta_content:!"action=
| 22
| %sagan%
| 22
| ",dropped,blocked; reference:url,https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/ef4bde1e-412e-11ee-8e6d-fa163e15d75b/FortiAnalyzer-7.4.1-Administration_Guide.pdf; parse_src_ip:2; content:!"- - - -"; classtype:trojan-activity; sid:5014364; rev:2; metadata: updated_on 2024_05_28;)